EmpirioLabs AI Video

• Outcome: Pass
• Latest audit: Oct 19, 2026 · 7:15 PM UTC
• Version: 1.0.0

Overview

This skill coherently generates videos through the EmpirioLabs API using a disclosed API key and saves the resulting media to a user-chosen path.

Install only if you trust EmpirioLabs with the prompts, image URLs, model parameters, and generated media involved. Keep EMPIRIOLABS_API_KEY in the environment rather than in prompts or files, review costs before long or high-resolution renders, and use --overwrite only when replacing an existing output file is intended.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Rogue Agent: Self-Modification, Session Persistence
• Taint Tracking: Direct Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (6)

Self-Modification

High

• Category: Rogue Agent
• Confidence: 85% confidence

Finding

Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.

Content

Scanner excerpt · scripts/video.py (reported line 56)May include surrounding context.

python

help="Any other model parameter, for example --param seed=7. Repeatable.")
    parser.add_argument("--out", help="Output file or directory. Default: the current directory.")
    parser.add_argument("--overwrite", action="store_true",
                        help="Replace existing files instead of adding a numeric suffix.")
    parser.add_argument("--no-download", action="store_true", help="Print the hosted URL without saving the file.")
    parser.add_argument("--timeout", type=float, default=1800.0,
                        help="Seconds to wait for the job (default 1800). The job keeps running after a timeout.")

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence

Finding

The skill requires network access and reads an API key from the environment, but it does not declare any explicit tool scope such as permissions or allowed-tools. That makes the effective trust boundary unclear to the host agent and can allow broader-than-necessary execution, increasing the risk of unintended external requests or misuse of sensitive environment data.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/empiriolabs_api.py (reported line 29)May include surrounding context.

python

__version__ = "1.0.0"

API_BASE = "https://api.empiriolabs.ai/v1"
KEY_ENV = "EMPIRIOLABS_API_KEY"
KEYS_URL = "https://platform.empiriolabs.ai/dashboard/api-keys"
BILLING_URL = "https://platform.empiriolabs.ai/dashboard/billing"

Unsafe Defaults

Medium

• Category: Tool Misuse
• Confidence: 75% confidence

Finding

Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface.

Content

Scanner excerpt · scripts/empiriolabs_api.py (reported line 352)May include surrounding context.

python

def list_models(timeout=60.0):
    """The public model catalog. No API key is needed."""
    payload = get_json("/models", auth=False, timeout=timeout)
    models = payload.get("data") if isinstance(payload, dict) else payload
    return models if isinstance(models, list) else []

Unsafe Defaults

Medium

• Category: Tool Misuse
• Confidence: 75% confidence

Finding

Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface.

Content

Scanner excerpt · scripts/empiriolabs_api.py (reported line 360)May include surrounding context.

python

def list_models(timeout=60.0):
    """The public model catalog. No API key is needed."""
    payload = get_json("/models", auth=False, timeout=timeout)
    models = payload.get("data") if isinstance(payload, dict) else payload
    return models if isinstance(models, list) else []

Tainted flow: 'partial' from os.environ.get (line 689, credential/environment) → open (file write)

Medium

• Category: Data Flow
• Confidence: 65% confidence

Finding

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

Content

Scanner excerpt · scripts/empiriolabs_api.py (reported line 691)May include surrounding context.

python

os.makedirs(folder, exist_ok=True)
                partial = path + ".part"
                try:
                    with open(partial, "wb") as handle:
                        while True:
                            chunk = resp.read(1024 * 256)
                            if not chunk:

Static analysis

No suspicious patterns detected.